General
- Target 2026-07-06_a2797c053489d1cfae7365ba385a71d8_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar
- Size 14.1MB
- Sample260707-b97khafw5w
- SHA256 dbb362738b016dd8879de693f90812d253bafd9c262a89acda41f44f886e9e15
- MD5 a2797c053489d1cfae7365ba385a71d8
- SHA1 116205bdbab9dc9ab560b8a33d38c85be5c8f5c6
- SHA512 86a276af492542f00c574cd46e8a7f4c87a9015cf76fe2dee5eba4cd62dc14d3d6bb73486dd85e41f7023a21b81617f1902e034b9d316e568d86f1e7bf5fd8b6
- SSDEEP 196608:mK89A3sGXUG3f5K2GV5wYEg828O0qCXa+JBTkUYMfgT0M:9syUG3f1U5wVg8PqD+LTkmfgTr
- TLSH T152E68D5E639400A8D0E3C138D6037A13E6B274155BB396EB318E552A1F779F19E3FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_a2797c053489d1cfae7365ba385a71d8_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a2797c053489d1cfae7365ba385a71d8_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a2797c053489d1cfae7365ba385a71d8_coinminer_glassworm_icedid_njrat_remcos_sliver_vidar
- Size 14.1MB
- SHA256 dbb362738b016dd8879de693f90812d253bafd9c262a89acda41f44f886e9e15
- MD5 a2797c053489d1cfae7365ba385a71d8
- SHA1 116205bdbab9dc9ab560b8a33d38c85be5c8f5c6
- SHA512 86a276af492542f00c574cd46e8a7f4c87a9015cf76fe2dee5eba4cd62dc14d3d6bb73486dd85e41f7023a21b81617f1902e034b9d316e568d86f1e7bf5fd8b6
- SSDEEP 196608:mK89A3sGXUG3f5K2GV5wYEg828O0qCXa+JBTkUYMfgT0M:9syUG3f1U5wVg8PqD+LTkmfgTr
- TLSH T152E68D5E639400A8D0E3C138D6037A13E6B274155BB396EB318E552A1F779F19E3FE22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.